74 		uint32_t q[8], carry;  in br_aes_ct_ctrcbc_ctr()  local
81 		q[0] = br_swap32(iv0);  in br_aes_ct_ctrcbc_ctr()
82 		q[2] = br_swap32(iv1);  in br_aes_ct_ctrcbc_ctr()
83 		q[4] = br_swap32(iv2);  in br_aes_ct_ctrcbc_ctr()
84 		q[6] = br_swap32(iv3);  in br_aes_ct_ctrcbc_ctr()
92 		q[1] = br_swap32(iv0);  in br_aes_ct_ctrcbc_ctr()
93 		q[3] = br_swap32(iv1);  in br_aes_ct_ctrcbc_ctr()
94 		q[5] = br_swap32(iv2);  in br_aes_ct_ctrcbc_ctr()
95 		q[7] = br_swap32(iv3);  in br_aes_ct_ctrcbc_ctr()
106 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_ctr()
107 		br_aes_ct_bitslice_encrypt(ctx->num_rounds, sk_exp, q);  in br_aes_ct_ctrcbc_ctr()
108 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_ctr()
110 		br_enc32le(tmp, q[0]);  in br_aes_ct_ctrcbc_ctr()
111 		br_enc32le(tmp + 4, q[2]);  in br_aes_ct_ctrcbc_ctr()
112 		br_enc32le(tmp + 8, q[4]);  in br_aes_ct_ctrcbc_ctr()
113 		br_enc32le(tmp + 12, q[6]);  in br_aes_ct_ctrcbc_ctr()
114 		br_enc32le(tmp + 16, q[1]);  in br_aes_ct_ctrcbc_ctr()
115 		br_enc32le(tmp + 20, q[3]);  in br_aes_ct_ctrcbc_ctr()
116 		br_enc32le(tmp + 24, q[5]);  in br_aes_ct_ctrcbc_ctr()
117 		br_enc32le(tmp + 28, q[7]);  in br_aes_ct_ctrcbc_ctr()
140 	uint32_t q[8];  in br_aes_ct_ctrcbc_mac()  local
150 	q[1] = 0;  in br_aes_ct_ctrcbc_mac()
151 	q[3] = 0;  in br_aes_ct_ctrcbc_mac()
152 	q[5] = 0;  in br_aes_ct_ctrcbc_mac()
153 	q[7] = 0;  in br_aes_ct_ctrcbc_mac()
156 		q[0] = cm0 ^ br_dec32le(buf +  0);  in br_aes_ct_ctrcbc_mac()
157 		q[2] = cm1 ^ br_dec32le(buf +  4);  in br_aes_ct_ctrcbc_mac()
158 		q[4] = cm2 ^ br_dec32le(buf +  8);  in br_aes_ct_ctrcbc_mac()
159 		q[6] = cm3 ^ br_dec32le(buf + 12);  in br_aes_ct_ctrcbc_mac()
161 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_mac()
162 		br_aes_ct_bitslice_encrypt(ctx->num_rounds, sk_exp, q);  in br_aes_ct_ctrcbc_mac()
163 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_mac()
165 		cm0 = q[0];  in br_aes_ct_ctrcbc_mac()
166 		cm1 = q[2];  in br_aes_ct_ctrcbc_mac()
167 		cm2 = q[4];  in br_aes_ct_ctrcbc_mac()
168 		cm3 = q[6];  in br_aes_ct_ctrcbc_mac()
219 	first_iter = 1;  in br_aes_ct_ctrcbc_encrypt()
221 		uint32_t q[8], carry;  in br_aes_ct_ctrcbc_encrypt()  local
227 		q[0] = br_swap32(iv0);  in br_aes_ct_ctrcbc_encrypt()
228 		q[2] = br_swap32(iv1);  in br_aes_ct_ctrcbc_encrypt()
229 		q[4] = br_swap32(iv2);  in br_aes_ct_ctrcbc_encrypt()
230 		q[6] = br_swap32(iv3);  in br_aes_ct_ctrcbc_encrypt()
242 		q[1] = cm0;  in br_aes_ct_ctrcbc_encrypt()
243 		q[3] = cm1;  in br_aes_ct_ctrcbc_encrypt()
244 		q[5] = cm2;  in br_aes_ct_ctrcbc_encrypt()
245 		q[7] = cm3;  in br_aes_ct_ctrcbc_encrypt()
247 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_encrypt()
248 		br_aes_ct_bitslice_encrypt(ctx->num_rounds, sk_exp, q);  in br_aes_ct_ctrcbc_encrypt()
249 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_encrypt()
256 		q[0] ^= br_dec32le(buf +  0);  in br_aes_ct_ctrcbc_encrypt()
257 		q[2] ^= br_dec32le(buf +  4);  in br_aes_ct_ctrcbc_encrypt()
258 		q[4] ^= br_dec32le(buf +  8);  in br_aes_ct_ctrcbc_encrypt()
259 		q[6] ^= br_dec32le(buf + 12);  in br_aes_ct_ctrcbc_encrypt()
260 		br_enc32le(buf +  0, q[0]);  in br_aes_ct_ctrcbc_encrypt()
261 		br_enc32le(buf +  4, q[2]);  in br_aes_ct_ctrcbc_encrypt()
262 		br_enc32le(buf +  8, q[4]);  in br_aes_ct_ctrcbc_encrypt()
263 		br_enc32le(buf + 12, q[6]);  in br_aes_ct_ctrcbc_encrypt()
274 			cm0 ^= q[0];  in br_aes_ct_ctrcbc_encrypt()
275 			cm1 ^= q[2];  in br_aes_ct_ctrcbc_encrypt()
276 			cm2 ^= q[4];  in br_aes_ct_ctrcbc_encrypt()
277 			cm3 ^= q[6];  in br_aes_ct_ctrcbc_encrypt()
279 			cm0 = q[0] ^ q[1];  in br_aes_ct_ctrcbc_encrypt()
280 			cm1 = q[2] ^ q[3];  in br_aes_ct_ctrcbc_encrypt()
281 			cm2 = q[4] ^ q[5];  in br_aes_ct_ctrcbc_encrypt()
282 			cm3 = q[6] ^ q[7];  in br_aes_ct_ctrcbc_encrypt()
290 			q[0] = cm0;  in br_aes_ct_ctrcbc_encrypt()
291 			q[2] = cm1;  in br_aes_ct_ctrcbc_encrypt()
292 			q[4] = cm2;  in br_aes_ct_ctrcbc_encrypt()
293 			q[6] = cm3;  in br_aes_ct_ctrcbc_encrypt()
294 			br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_encrypt()
295 			br_aes_ct_bitslice_encrypt(ctx->num_rounds, sk_exp, q);  in br_aes_ct_ctrcbc_encrypt()
296 			br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_encrypt()
297 			cm0 = q[0];  in br_aes_ct_ctrcbc_encrypt()
298 			cm1 = q[2];  in br_aes_ct_ctrcbc_encrypt()
299 			cm2 = q[4];  in br_aes_ct_ctrcbc_encrypt()
300 			cm3 = q[6];  in br_aes_ct_ctrcbc_encrypt()
349 		uint32_t q[8], carry;  in br_aes_ct_ctrcbc_decrypt()  local
356 		q[0] = br_swap32(iv0);  in br_aes_ct_ctrcbc_decrypt()
357 		q[2] = br_swap32(iv1);  in br_aes_ct_ctrcbc_decrypt()
358 		q[4] = br_swap32(iv2);  in br_aes_ct_ctrcbc_decrypt()
359 		q[6] = br_swap32(iv3);  in br_aes_ct_ctrcbc_decrypt()
371 		q[1] = cm0 ^ br_dec32le(buf +  0);  in br_aes_ct_ctrcbc_decrypt()
372 		q[3] = cm1 ^ br_dec32le(buf +  4);  in br_aes_ct_ctrcbc_decrypt()
373 		q[5] = cm2 ^ br_dec32le(buf +  8);  in br_aes_ct_ctrcbc_decrypt()
374 		q[7] = cm3 ^ br_dec32le(buf + 12);  in br_aes_ct_ctrcbc_decrypt()
376 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_decrypt()
377 		br_aes_ct_bitslice_encrypt(ctx->num_rounds, sk_exp, q);  in br_aes_ct_ctrcbc_decrypt()
378 		br_aes_ct_ortho(q);  in br_aes_ct_ctrcbc_decrypt()
380 		br_enc32le(tmp +  0, q[0]);  in br_aes_ct_ctrcbc_decrypt()
381 		br_enc32le(tmp +  4, q[2]);  in br_aes_ct_ctrcbc_decrypt()
382 		br_enc32le(tmp +  8, q[4]);  in br_aes_ct_ctrcbc_decrypt()
383 		br_enc32le(tmp + 12, q[6]);  in br_aes_ct_ctrcbc_decrypt()
385 		cm0 = q[1];  in br_aes_ct_ctrcbc_decrypt()
386 		cm1 = q[3];  in br_aes_ct_ctrcbc_decrypt()
387 		cm2 = q[5];  in br_aes_ct_ctrcbc_decrypt()
388 		cm3 = q[7];  in br_aes_ct_ctrcbc_decrypt()